Lucene search
+L

Vulnerabilities fixed in Adobe ColdFusion

🗓️ 09 Jul 2025 08:41:53Reported by NCSCType 
ncsc
 ncsc
🔗 advisories.ncsc.nl👁 88 Views

Adobe fixes ColdFusion XXE, hard-coded credentials, authorization, XML injection and XSS.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2025-49537
8 Jul 202520:49
–attackerkb
attackerkb
attackerkb
CVE-2025-49551
8 Jul 202520:49
–attackerkb
attackerkb
attackerkb
CVE-2025-49536
8 Jul 202520:49
–attackerkb
bdu_fstec
BDU FSTEC
ColdFusion Authentication Bypass
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion Code Execution
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion Code Execution
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion Code Execution
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion Code Execution
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion Command Injection File Read
13 Jul 202500:00
–bdu_fstec
bdu_fstec
BDU FSTEC
ColdFusion XML External Object Reference
13 Jul 202500:00
–bdu_fstec
Rows per page
Vulners
Node
OR
adobecoldfusionRange≤2021.20
adobecoldfusion_2021Range≤update20
adobecoldfusion_2023Range≤update14
adobecoldfusion_2025Range≤update2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Jul 2025 08:41Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.12.4 - 9.3
EPSS0.02488
SSVC
88